Product:
iOS, iPadOS, macOS, tvOS, watchOS
Summary
A use after free issue was addressed with improved memory management. An attacker in a privileged network position may be able to perform a denial-of-service attack using crafted Wi-Fi packets. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-28994 |
Exploitation
To exploit this vulnerability, an attacker must be in a privileged network position and can send specially crafted Wi-Fi packets to the target device. If successful, this could lead to a denial-of-service condition, disrupting the normal operation of the affected device.
Affected Products
- iOS 18.7.9 and later
- iPadOS 18.7.9 and later
- macOS Sequoia 15.7.7 and later
- macOS Sonoma 14.8.7 and later
- macOS Tahoe 26.5 and later
- tvOS 26.5 and later
- watchOS 26.5 and later
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly applying updates can help protect against potential exploits and ensure improved security.